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Abstract — The ability to exchange secret information is critical 
to many commercial, governmental, and military networks. The 
intrinsically secure communications graph (i5-graph) is a random 
graph which describes the connections that can be securely 
established over a large-scale network, by exploiting the physical 
properties of the wireless medium. This paper provides an 
overview of the main properties of this new class of random 
graphs. We first analyze the local properties of the i5-graph, 
namely the degree distributions and their dependence on fading, 
target secrecy rate, and eavesdropper collusion. To mitigate 
the effect of the eavesdroppers, we propose two techniques 
that improve secure connectivity. Then, we analyze the global 
properties of the i5-graph, namely percolation on the infinite 
plane, and full connectivity on a finite region. These results help 
clarify how the presence of eavesdroppers can compromise secure 
communication in a large-scale network. 

Index Terms — Physical-layer security, wireless networks, 
stochastic geometry, secrecy capacity, connectivity, percolation. 



I. Introduction 

Contemporary security systems for wireless networks are 
based on cryptographic primitives that generally ignore two 
key factors: (a) the physical properties of the wireless medium, 
and (b) the spatial configuration of both the legitimate and 
malicious nodes. These two factors are important since they 
affect the communication channels between the nodes, which 
in turn determine the fundamental secrecy limits of a wireless 
network. In fact, the inherent randomness of the wireless 
medium and the spatial location of the nodes can be leveraged 
to provide intrinsic security of the communications infrastruc- 
ture at the physical-layer levelQ 

The basis for information-theoretic security, which builds 
on the notion of perfect secrecy was laid in [2] and later 
in ||3|, H]. More recently, there has been a renewed interest 
in information-theoretic security over wireless channels, from 
the perspective of space-time communications Q, multiple- 
input multiple-output communications ll6l- lfT0l . eavesdropper 
collusion IfTTI . IfTSl . cooperative relay networks |fT3l . fading 
channels lfT4l - ||T8l . strong secrecy |fT9l . ||20l . secret key agree- 
ment II2TI - II25I . code design ||26l - l|28l . among other topics. 
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'in the hterature, the term "security" typically encompasses 3 different 
characteristics: secrecy (or privacy), integrity, and authenticity. This paper 
does not consider the issues of integrity or authenticity, and the terms 
"secrecy" and "security" are used interchangeably. 



A comprehensive treatment of physical-layer security can be 
found in ||29l . A fundamental limitation of the literature is that 
it only considers scenarios with a small number of nodes. To 
account for large-scale networks composed of multiple legiti- 
mate and eavesdropper nodes, secrecy graphs were introduced 
in ||30l from a geometrical perspective, and in ll3T| from an 
information-theoretic perspective. The local connectivity of 
secrecy graphs was extensively characterized in ll32l . while the 
scaling laws of the secrecy capacity were presented in ll33l . 
121]. The feasibility of long-range secure communication was 
proved in ll35l . in the context of continuum percolation. 

In this paper, we present an overview of secure communi- 
cation over large-scale networks, in terms of the properties of 
the underlying random graph. The main contributions are as 
follows: 

• Framework for intrinsic security in stochastic networks: 
We introduce an information-theoretic definition of the 
intrinsically secure communications graph (i5-graph), 
based on the notion of strong secrecy. 

« Local connectivity in the iS-graph: We provide a proba- 
bilistic characterization of both in-degree and out-degree 
of a typical node. 

• Techniques for communication with enhanced secrecy: 
We propose sectorized transmission and eavesdropper 
neutralization as two techniques for enhancing the secrecy 
of communication. 

• Maximum secrecy rate (MSR) in the iS -graph: We pro- 
vide a probabilistic characterization of the MSR between 
a typical legitimate node and each of its neighbors. 

« The case of colluding eavesdroppers: We quantify the 
degradation in secure connectivity arising from eaves- 
droppers collusion. 

« Percolation in the iS-graph: We prove the existence 
of a phase transition in the Poisson iS-giaph, showing 
that long-range communication is still possible when a 
secrecy constraint is present. 

• Full connectivity in the iS-graph: We characterize se- 
cure full connectivity on a finite region of the Poisson 
i5-graph. 

This paper is organized as follows. Section |II] describes the 
system model. Section |III] characterizes local connectivity in 
the Poisson i5-graph. Section |IV] analyzes two techniques for 
enhancing the secrecy of communication. Section W\ considers 
the MSR between a node and its neighbours. Section [Vl] 
characterizes the case of colluding eavesdroppers. Section [VTIl 
characterizes continuum percolation in the Poisson i5-graph 
defined over the infinite plane. Section IVIIII analyzes full 
connectivity in the Poisson i5-graph restricted to a finite 
region. Section |IX] concludes the paper 



II. System Model 

A. Wireless Propagation Characteristics 

In a wireless environment, the received power P,:^{xi,Xj) 
associated with the link modeled as 



• Legitimate node 
X Eavesdropper node 
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where Pi is the (common) transmit power of the legiti- pigu^e l Example of an i5-graph on M?. 
mate nodes; and g{xi,Xj, Zx^.xj) is the power gain of the 



link XiXj, where the random variable (RV) Zx^.x- represents 
the random propagation effects (such as multipath fading or 
shadowing) associated with link Xix'j. We consider that the 
Zxi,x iXi 7^ Xj are independent identically distributed (IID) 
RVs with common probability density function (PDF) fz{z), 
and that Zx^^x = Zx -,xi due to channel reciprocity. The chan- 
nel gain g{xi,Xj, Zxi^x ) is considered constant (quasi-static) 
throughout the use of the communications channel, which 
corresponds to channels with a large coherence time. The gain 
function is assumed to satisfy the following conditions: 

1) g{xi, Xj, Zxi^x ) depends on Xi and Xj only through the 
link length \xi — Xj\; with abuse of_notation, we can 



write g{r,z) = g{x,, Xj , z)]^^ 



2) g{r,z) is continuous and strictly decreasing in r. 

3) liuir^ao g{r,z) = 0. 

The proposed model is general enough to account for common 
choices of g. One example is the unbounded model where 
g{r,z) — -j§^. The term ^ accounts for the far-field path 
loss with distance, where the amplitude loss exponent b is 
environment-dependent and can approximately range from 
0.8 (e.g., hallways inside buildings) to 4 (e.g., dense urban 
environments), with 6 = 1 corresponding to free space 
propagation. Another example is the bounded model where 
g{r, z) = Yq^^b, which eliminates the singularity at the origin, 
but often leads to intractable analytical results ||36l . Further- 
more, by appropriately choosing of the distribution of Zx^^x -, 
both models can account for various random propagation 
effects, including Nakagami-m fading, Rayleigh fading, and 
log-normal shadowing 1371 . 

B. iS-Graph 

Consider a wireless network where legitimate nodes and 
potential eavesdroppers are randomly scattered in space, ac- 
cording to some point process. The i5-graph is a convenient 
representation of the information-theoretically secure links that 
can be established on such network, and is defined as follows. 

Definition 2.1 (iS-Graph KJTll }: Let = {xJ C K'' 
denote the set of legitimate nodes, and He = {e^} C M'' 
denote the set of eavesdroppers. The iS-graph is the directed 
graph G = {Iii,£} with vertex set 11^ and edge set 



£ = {x^Xj : %[xi,Xj) > g}, 



(2) 



where g is a threshold representing the prescribed infimum 
secrecy rate for each communication link; and !]{^{xi,Xj) is 



the maximum secrecy rate (MSR) of the link XiXj, given by 



!l^{xi,xj) = 
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in bits per complex dimension, where [x] 
cr| , (Tg are the noise powers of 
eavesdroppers, respectively; and e* 



(3) 

max{x, 0}; 

cr| , (Tg are the noise powers of the legitimate users and 

= argmax Prx(a^j, 6^)0 

This definition presupposes that the eavesdroppers are not 
allowed to collude (i.e., they cannot exchange or combine 
information), and therefore only the eavesdropper with the 
strongest received signal from Xi determines the MSR between 
Xi and Xj. 

The i5-graph admits an outage interpretation, in the sense 
that legitimate nodes set a target secrecy rate g at which they 
transmit without knowing the channel state information (CSI) 
of the legitimate nodes and eavesdroppers. In this context, 
an edge between two nodes signifies that the corresponding 
channel is not in secrecy outage. 

Consider now the particular scenario where the following 
conditions hold: (a) the infimum desired secrecy rate is zero, 
i.e., g = 0; (b) the wireless environment introduces only path 
loss, i.e., Zxi^x = 1 in ([T]i; and (c) the noise powers of 
the legitimate users and eavesdroppers are equal, i.e., a'j = 
(7g = (7^. Note that by setting = 0, we are considering the 
existence of secure links, in the sense that an edge XiXj is 
present if and only if !]^{xi,Xj) > 0. Under these special 
conditions, the edge set in (|2|i simplifies to 

S — "^x^Xj" . I 



Xi\ < \x. 



argmm \Xi-ek 



!}■ 

(4) 

which corresponds the geometrical model proposed in [|30l . 
Fig. [U shows an example of such an i5-graph on R^. 

The spatial location of the legitimate and eavesdropper 
nodes can be modeled either deterministic ally or stochastically. 
In many cases, the node positions are unknown to the network 
designer a priori, so they may be treated as uniformly random 
according to a Poisson point process ll37l - B0l . 

Definition 2.2 (Poisson iS-graph): The Poisson iS-graph 
is an i5-graph where fl^jlle C are mutually independent, 
homogeneous Poisson point processes with densities Xi and 
Ag, respectively. 

In the remainder of the paper (unless otherwise indicated), 
we focus on Poisson i5-graphs in R^. 



-For notational simplicity, when Z = 1, we omit the second argument of 
the function g{r,z) and simply use g(r). 



^This definition uses strong secrecy as the condition for information- 
theoretic security. See 1191 . 1321 for more details. 



Figure 2. In-degree of a node. In this example, the node at the origin can 
receive messages with information-theoretic security from A'^in = 2 nodes. 
The RV A is the area of a typical Voronoi cell, induced by the eavesdropper 
Poisson process He with density Ae. 



Figure 3. Out-degree of a node. In this example, the node at the origin can 
transmit messages with infomiation-theoretic security to A^out = 3 nodes. 



III. Local Connectivity in the Poisson i5-GRAPH 

The i5-graph is a random graph, and therefore the in- 
and out-degrees of the legitimate nodes are RVs. In this 
section, we provide a probabilistic characterization of both 
in-degree A^in and out-degree iVout of a typical node in the 
Poisson i5-graphQ We first consider the simplest case of 
g ^ (the existence of secure links), Z^^^xj = 1 (path loss 
only), and = a'j (equal noise powers) in Sections IIII-AI 
IIII-BI and IIII-CI This scenario leads to an i5-graph with a 
simple geometric description, thus providing various insights 
that are useful in understanding more complex cases. Later, 
in Sections IIII-DI and IIII-EI we separately analyze how the 
node degrees are affected by wireless propagation effects other 
than path loss (e.g., multipath fading), a non-zero secrecy rate 
threshold g, and unequal noise powers (Jg,(Jg. 

A. In-Degree Characterization 

The following theorem uncovers a surprising connection 
between a node's in-degree and the area of a typical cell in a 
Poisson- Voronoi tessellation. 

Theorem 3.1 (SJTjl): The in-degree iVjn of a typical node 
in the Poisson i5-graph has the following moment generating 
function (MGF) 

MAr,„ (s) = E jcxp (^yAie' " } ' 

where A is the area of a typical Voronoi cell induced by a 
unit-density Poisson process. Furthermore, all the moments of 
iViii are given by 

nm = Y.[Y) S{n,k)E{A''}, n>l, (6) 
fc=i ^ '^^ 

'^In this paper, we analyze the local properties of a typical node in the 
Poisson i<S-graph. This notion is made precise in 1391 Sec. 4.4] using Pahn 
theory. 



where S{n, k), 1 < k < n, are the Stirling numbers of the 
second kind gH Ch. 24]. 

Figure |2] illustrates the in-degree of a legitimate node. 
Equation ^ expresses the moments of iVjn in terms of the 
moments of A. In general, E{ A'^} cannot be obtained in closed 
form, except in the case of fc = 1 where E{^} = 1. For k ~ 2 
and fc = 3, E{A''} can be expressed as multiple integrals and 
then computed numerically 142] . Alternatively, the moments of 
A can be determined using Monte Carlo simulation of random 
Poisson- Voronoi tessellations B3l . 

The above theorem can be used to obtain other in- 
connectivity properties, as given in the following corollary. 

Corollary 3.1: The average in-degree of a typical node in 
the Poisson iS-giaph is 

E{M„} = ^ (7) 

Ae 

and the probability that a typical node cannot receive from 
anyone with positive secrecy rate (in-isolation) is 

Pi„„i,oi = E{e-^"^}. (8) 

B. Out-Degree Characterization 

Theorem 3.2 f^iOl/. H31]l}: The out-degree A^out of a typical 
node in the Poisson z5-graph has the following geometric 
probability mass function (PMF) 

^(^)"(aita:)' "-"^ 

Figure [3] illustrates the out-degree of a node. The above the- 
orem can be used to obtain other out-connectivity properties, 
as given in the following corollary. 

Corollary 3.2: The average out-degree of a typical node in 
the Poisson i5-graph is 

E{A^out} = ^, (10) 
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Figure 4. PMF of the in- and out-degree of a node ( y 

line marks tlie average node degrees, EjA^out} = EjA'^in} 
accordance witli Property 13. II 
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Figure 5. Probabilities of in- and out-isolation of a node, versus the ratio 

A 

Note that Pi,i_isoi < Pout-isol for ™y fixed according to Property W!j\ 



and the probability that a typical node cannot transmit to 
anyone with positive secrecy rate (out-isolation) is 

Pout-isol = T~T^- '^^^^ 

+ Ae 

C. General Relationships Between In- and Out-Degree 

We have so far considered the probabilistic distribution of 
the in- and out-degrees in a separate fashion. This section 
establishes a direct comparison between some characteristics 
of the in- and out-degrees. 

Property 3.1 ([32]): For the Poisson i5-graph with > 
and Ae > 0, the average degrees of a typical node satisfy 

E{iVi„}==E{7Vout}-^. (12) 

Furthermore, we can establish the following relationship 
between the probabilities of in- and out-isolation. 

Property 3.2 (l\32^): For the Poisson i5-graph with X( > 
and Ae > 0, the probabilities of in- and out-isolation of a 
typical node satisfy 

Pin-isol < Pout-isol- (13) 

An intuitive explanation for this property is provided in 11321 . 
Figure |4] compares the PMFs of the in- and out-degree of a 
node, while Figure |5] compares the probabiUties of in- and 
out-isolation for various ratios 4^. 

D. Effect of the Wireless Propagation Characteristics 

We have so far analyzed the local connectivity of the 
i5-graph in the presence of path loss only. However, the wire- 
less medium typically introduces random propagation effects 
such as multipath fading and shadowing, which are modeled 
by the RV Z^^.x- in ©■ Considering g = 0, aj = ^ a^. 



where 



argmaxgdii - ek\ 



and arbitrary propagation effects Zxi,x - with PDF Jz{z), we 
can combine ^ with the general propagation model of ([1} to 
obtain the edge set 

8 = {xix] : g{\xi~x.j\, Z^^.x,) > g{\xi-e*\, Zxi,e*)}, (14) 



Unlike the case of path-loss only, where the out-connections 
of a node are determined only by the closest eavesdropper, 
here they are determined by the eavesdropper with the least 
attenuated channel. The following theorem characterizes the 
distribution of the out-degree. 

Theorem 3.3 (02l/).- For the Poisson tiS-graph with prop- 
agation effects Zxi^x- whose PDF is given by a continuous 
function fz{z), the PMF of the out-degree iVout of a typical 
node is given in and is invariant with respect to fz{z)- 

Intuitively, the propagation environment affects both the 
legitimate nodes and eavesdroppers in the same way, such that 
the PMF of A^out is invariant with respect to the PDF fz{z). 
However, the PMF of A^in does depend on fz{z) in a non- 
trivial way, although its mean remains the same, as specified 
in the following corollary. 

Corollary 3.3: For the Poisson iiS-graph with propagation 
effects Zxi^xj distributed according to fz{z), the average node 
degrees are 

E{Arin} = E{Afout} = ^, (15) 

Ae 

for any distribution fz{z)- 

We thus conclude that the expected node degrees are 
invariant with respect to the distribution characterizing the 
propagation effects. 

E. Effect of the Secrecy Rate Threshold and Noise Powers 

In this section, we study the effect of non-zero secrecy rate 
threshold, i.e., g > 0, and unequal noise powers, i.e., af ^ 
(Tg, on the i5-graph. Considering Zx^.x- ~ 1 and arbitrary 
noise powers afjCr^, we can combine ^ with the general 
propagation model of ^ and obtain the edge set 

^2 „2 



£ = 



: g{\x, - x,\) > ^2^g{\x, - |) + ^(2^ - 1)}, 

(16) 
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target secrecy rate g (bits) 

Figure 6. Average node degree versus the secrecy rate threshold g, for 
various values of Pe/cr'^ {cr'^ — — di''') — ~3F' b = 2, \i = lm~^, 
Ae = 0.1m-2). 
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Figure 7. Secure communication with sectorized transmission. In this 
example with L = 4 sectors, the node at the origin can transmit messages 
with infomiation-theoretic security to A^out = 5 nodes. 



where 

e* = argmin — efc|. 

Note that by setting g = and af = a"^ in (fT6l ) we obtain 
the edge set in (|4]i as a special case. The exact dependence of 
the average node degree on the parameters g, af , depends 
on the function g{r). To gain further insights, we consider the 
specific channel gain function 

9ir) = ^, r>0. (17) 

This function has been widely used in the literature to model 
path loss behavior as a function of distance, and satisfies the 
conditions in Section III-AI The following theorem character- 
izes the average degrees of the resulting i5-graph. 

Theorem 3.4 f|52]/j; For the Poisson iiS-graph with secrecy 
rate threshold g, noise powers and channel gain func- 

tion g{r) = the average node degrees are 

E{iVi„} = E{A^out} 

= n'XAJ — ; -^dx (18) 

Figure |6] illustrates the effect of the secrecy rate threshold g 
on the average node degrees. We observe that the average node 
degree attains its maximum value of ^ = 10 at = 0, and 
is monotonically decreasing with g. 

IV. Techniques for Communication with Enhanced 
Secrecy 

Based on the results derived in Section |III1 we observe 
that even a small density of eavesdroppers is enough to 
significantly disrupt connectivity of the i5-graph. For example, 
if the density of eavesdroppers is half the density of legitimate 
nodes, then from ( fTSl i the average node degree is only ^ — 2. 
In this section, we propose two techniques — sectorized trans- 
mission and eavesdropper neutralization — which achieve an 
average degree higher than 



A. Sectorized Transmission 

We have so far assumed that the legitimate nodes employ 
omnidirectional antennas, distributing power equally among 
all directions. We now consider that each legitimate node is 
able to transmit independently in L sectors of the plane, with 
L > 1, as depicted in Figure |7] This can be accomplished, for 
example, through the use of L directional antennas. With each 
node Xi S 11^, we associate L transmission sectors {Sl^^}f^^, 
defined as 

5f ^ jz e M2 : 0, + (/ - 1)^ <Z¥^< + 

for I = 1 . . . L, where {4>i}^i are random offset angles with 
an arbitrary joint distribution. The resulting iiS-graph Gl = 
{n^,fi} has an edge set given by 

£l = {xiXj : \xt - x-i \ < \xt - e*|}, 

where 

e* = argmin \xi - e^l, 5* = {(Sf ^ : Xj G 5^ | . 

Here, S* is the transmission sector of Xi that contains the 
destination node xj, and e* is the eavesdropper inside S* 
that is closest to the transmitter Xi. The following theorem 
characterizes the average node degree as a function of L. 

Theorem 4.1 (Sectorized Transmission Ii44]l }: For the Pois- 
son iS -graph Gl with L sectors, the average node degrees 
are 

E{iVin}=E{iVout}=iT^. (19) 
Ae 

We conclude that the average node degree increases linearly 
with the number of sectors L, and hence sectorized transmis- 
sion is an effective technique for enhancing the secrecy of 
communications. Figure [T] provides an intuitive understanding 
of why sectorization works. Specifically, if there was no 
sectorization, node would be out-isolated, due to the close 
proximity of the eavesdropper in sector S^^\ However, if we 
allow independent transmissions in four non-overlapping sec- 
tors, that same eavesdropper can only hear the transmissions 




So(i?e,i) n e 



Figure 8. Secure communication with eavesdropper neutralization. In this 
example, the node at the origin can transmit messages with information- 
theoretic security to A^out = 5 nodes. 
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Figure 9. Average node degree versus the neutralization radius p, for various 
values of Ae (A^ = lm~^). 



inside sector S^^\ Thus, even though node is out-isolated 
with respect to sector S^^\ it may still communicate securely 
with some legitimate nodes inside sectors 5^^-', 5'^^-', and S'^^^ 

B. Eavesdropper Neutralization 

In some scenarios, each legitimate node may be able to 
physically inspect its surroundings and deactivate the eaves- 
droppers falling inside some neutralization region. With each 
node Xi E He, we associate a neutralization region Qi inside 
which all eavesdroppers have been deactivated. The total 
neutralization region Q can then be seen as a Boolean model 
with points {xi} and associated sets {O J, i.e.. 



i=l 



Since the eavesdroppers inside 9 have been deactivated, the 
effective eavesdropper process after neutralization is He fl 0, 
where Q = R^\8 denotes the complement of Q. The resulting 
i5-graph Ge = {n£,£e} has an edge set given by 



< \Xi 



e = argmiii l^i — Cfc 

cten.ne 



In the following, we consider the case of a circular neu- 
tralization set, i.e, Qi = Bq{p) where p is a deterministic 
neutralization radius, as depicted in Fig. [8] 

Theorem 4.2 (Eavesdropper Neutralization h44\l ): For the 
enhanced Poisson i5-graph Gp with neutralization radius p, 
the average node degrees of a typical node are lower-bounded 
by 



E{7Vin} = E{7Vout} > Y (^Aep2 + e-^^P') 



(20) 



We conclude that the average node degree increases at a 
rate that is at least exponential with the neutralization radius p, 
making eavesdropper neutralization an effective technique for 
enhancing the secrecy of communications. 

Figure |9] plots the average node degree versus the neutral- 
ization radius p, for various values of Ag. We observe that the 



analytical lower-bound for EjA^out} given in ( |20l ) is very close 
to the actual value of EjA^out} obtained through Monte Carlo 
simulation, becoming tight as p ^ or Ae oo. 

V. Maximum Secrecy Rate in the Poisson ziS-Graph 

In this section, we analyze the MSR between a node and 
each of its neighbours. Considering the coordinate system 
depicted in Fig. [3] and the channel gain g{r) = the 
MSR between the node at the origin and its i-th closest 
neighbour, i>l, can be written for a given realization of the 
node positions 11^ and He as 



l0g2 1 



Pf 



R 



26^2 



- log2 1 



(21) 



in bits per complex dimension. For each instantiation of the 
random Poisson processes II^ and He, a realization of the 
RV ^ i is obtained. The following theorem provides the 
distribution of this RV. 

Theorem 5.1 (KIT]!): The MSR between a typical node 
and its i-th closest neighbour, i > 1, is a RV whose cumulative 
distribution function (CDF) , (g) is given by 

ln2(^A,)' fP^Y r- 



X cxp —ttXi 



2^-1 



ttAp 



Pt 



2^-e - 1 



dz, 



(22) 



for g>0. 

From this result, we can trivially obtain the probability of 
existence of a non-zero MSR, and the probability of secrecy 
outage. 

Corollary 5.1: Considering the link between a typical node 
and its i-th closest neighbour, i > 1, the probability of 
existence of a non-zero MSR, Poxist.i = IP{^,i > 0}, is 



J'exist,, 



Xi + Ae 



(23) 



2 4 6 8 10 

target secrecy rate g (bits) 

Figure 10. Probability Poutago,i of secrecy outage between a node and its i- 
th closest neighbour, for various values of the neighbour index i (Xi = 1 m^^, 
Ae = 0.1 6 = 2, Pf/cr^ = 10). 
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Figure 1 1 . Normalized average node degree of the i<S-graph, ^\^J^l ' 
versus the amplitude loss exponent b, for the cases of colluding and non- 
colluding eavesdroppers. 



and the probability of an outage in MSR is Poutago.^(^?) = 
P{5^,, < g} = F^ ^ (g), as given in 

Figure [TO] shows the probability Poutagc.i of secrecy outage 
of a typical node transmitting to its i-th neighbour, as a 
function of the desired secrecy rate g. As expected, a secrecy 
outage become more likely as we increase the target secrecy 
rate g set by the transmitter 



Figure [TT] quantifies the (normalized) average node degree 
of the iS-graph, ^^^^jj^, versus the amplitude loss exponent b. 
As predicted analytically, it is apparent that cluttered envi- 
ronments with larger amplitude loss exponents b are more 
favorable for secure communication, in the sense that in such 
environments collusion only provides a marginal performance 
improvement for the eavesdroppers. 



VI. The Case of Colluding Eavesdroppers 

In this section, we consider that the eavesdroppers have 
ability to collude, i.e., they can exchange and combine the 
information received by all the eavesdroppers to decode the 
secret message. The following theorem characterizes the re- 
sulting average node degree in such graph. 

Theorem 6.1 (Ii32j}: For the Poisson i5-graph with collud- 
ing eavesdroppers, secrecy rate threshold g ^ 0, equal noise 
powers aj = ct^ , and channel gain function g(r) = 6 > 1, 
the average degrees of a typical node are 

E{7Vi„} = E{iVout} = Y sine , (24) 

where sine x = — — -■ 

It is insightful to rewrite (|24] | as E{A'out|colluding} = 
E{-^out I non-colluding} • i]{b), where 7y(6) = sinc(i), and 
r]{b) < 1 for 6 > 1. The function can be interpreted 
as the degradation factor in average connectivity due to 
eavesdropper collusion. In the extreme where 6 = 1, we have 
complete loss of secure connectivity with 77(1) = 0. This 
is because the series Pi-x.e = X^i^i diverges (i.e., the 
total received eavesdropper power is infinite), so the resulting 
average node degree is zero. In the other extreme where 

— > 00, we achieve the highest secure connectivity with 
ry(oo) — 1. This is because the first term in the P„ e 
series (corresponding to the non-colluding term) is dominant, 
so the average node degree in the colluding case approaches 
the non-colluding one. 



VII. Percolation in the Poisson i^-Graph 

Percolation theory studies the existence of phase transitions 
in random graphs, whereby an infinite cluster of connected 
nodes suddenly arises as some system parameter is varied. Per- 
colation theory has been used to study connectivity of multi- 
hop wireless networks, where the formation of an unbounded 
cluster is desirable for communication over arbitrarily long 
distances ll45l - B7l . In this section, we prove the existence of 
a phase transition in the Poisson iiS-graph, showing that long- 
range communication in a wireless network is still possible 
when a secrecy constraint is present. 

A. Definitions 

Graphs: We use G = {Ili,£} to denote the (directed) 
iiS-graph with vertex set 11^ and edge set given in Q. 
In addition, we define two undirected graphs: the weak 
iS-graph G*^^'' = {n£,£:™^kj.^ ^^^^^ 

= {x^ : %{x,,x,) > g\J%{x,,Xi)> g}, 
and the strong iS-graph G^^trong _ {Ilf, where 
^ . ^(3.^^ x,)> gh %ix,,x,) > g}. 

Graph Components: We use the notation x-^y to represent 
a path from node x to node y in a directed graph G, and x — y 
to represent a path between node x and node y in an undirected 



graph G*. We define four components: 

/C™'(^) = {2/enf :3x4y}, (25) 

IC''\x)^{yene:3y^x}, (26) 

/C"^-'^(x)^{2/€n, :3x^-'y}, (27) 

^stro„g(^) A |y g : 3 X ^ y}. (28) 

Percolation Probabilities: To study percolation in the 
i5-graph, it is useful to define percolation probabilities asso- 
ciated with the four graph components. Specifically, let p™*, 
, p^^^, and p''^"^^ respectively be the probabihties that the 
in, out, weak, and strong components containing node a; = 
have an infinite number of nodes, i.e., 

p^(A,,Ae,£<)^P{|/C*(0)|-CX3} 

for o e {out, in, weak, strong} H 

B. Main Result 

Typically, a continuum percolation model consists of an 
underlying point process defined on the infinite plane, and 
a rule that describes how connections are established between 
the nodes |!48l. A main property of all percolation models 
is that they exhibit a phase transition as some continuous 
parameter is varied. If this parameter is the density A of nodes, 
then the phase transition occurs at some critical density Ac. 
When A < Ac, denoted as the subcritical phase, all the clusters 
are a.s. bounded]^ When A > Ac, denoted as the supercritical 
phase, the graph exhibits a.s. an unbounded cluster of nodes, 
or in other words, the graph percolates. 

We now determine if percolation in the i5-graph is pos- 
sible, and if so, for which combinations of system parame- 
ters (A^jAejg) does it occur The mathematical characteriza- 
tion of the i5-graph presents two challenges: i) the i5-graph 
is a directed graph, which leads to the study of directed perco- 
lation; and ii) the iiS-graph exhibits dependencies between the 
state of different edges, which leads to the study of dependent 
percolation. The result is given by the following main theorem. 

Theorem 7.1 (Phase Transition in the iS-Graph h35'i ): 
For any Ae > and g satisfying 

G<Q< 9m.. = log2 [l + ^^^^) : (29) 

there exist critical densities A°"*, Aj,", A™'''', Af '""s satisfying 
< A^'^'^'^ < A™* < Af °"s < C50 (30) 
< A^'"'' < Aj," < Af < oo (31) 

such that 

pI, = 0, for A, < A^, (32) 
pI, > 0, for A, > A^ (33) 

for any o e {out, in, weak, strong}. Conversely, if g > Qnmx, 
then p'^ = for any A^ , Ag. 

' Except where otherwise indicated, we use the symbol o to represent the 
out, in, weak, or strong component. 

'We say that an event occurs "almost surely" (a.s.) if its probability is equal 
to one. 




Af (m-2) 

Figure 12. Simulated percolation probabilities for the weak and strong 
components of the i<S-graph, versus the density of legitimate nodes 
(Ae = lm-2, g = 0). 

Theorem 17.11 shows that each of the four components of 
the z5-graph (in, out, weak, and strong) experiences a phase 
transition at some nontrivial critical density A* of legitimate 
nodes. In addition, it shows that percolation can occur for 
any prescribed secrecy threshold g satisfying g < gamx = 
log2 (^1 + ^-§T^^^ long as the density of legitimate nodes 
is made large enough. This implies that for unbounded path 
loss models such as g{r) = l/r"^, percolation can occur for 
any arbitrarily large secrecy requirement g, while for bounded 
models such as g{r) = 1/(1 + r'*), the desired g may be too 
high to allow percolation. Our results also show that as long 
as g < gaiax, percolation can be achieved even in cases where 
the eavesdroppers are arbitrarily dense, by making the density 
of legitimate nodes large enough. 

Figure [12] shows the percolation probabilities for the weak 
and strong components of the i5-graph, versus the density A^ 
of legitimate nodes. As predicted by Theorem 17.11 the figure 
suggests that these components experience a phase transition 
as Xi is increased. In particular. A™'*'* ~ 3.4 m^^ and 
;^strong _ g 2m-2, for the case of Ae = 1 m^^ and g ^ 0. Op- 
erationally, this means that if long-range bidirectional secure 
communication is desired in a wireless network, the density 
of legitimate nodes must be at least 6.2 times that of the 
eavesdroppers. In practice, the density of legitimate nodes 
must be even larger, because a secrecy requirement greater 
than £1 = is typically required. This dependence on g is 
illustrated in Figure [13] In practice, it might also be of interest 
to increase A^ fairly beyond the critical density, since this leads 
to an increased average fraction of nodes which belong to 
the infinite component, thus improving secure connectivity. 

VIII. Full Connectivity in the Poisson i5-GRAPH 

In the previous section, we studied percolation in the 
i5-graph defined over the infinite plane. We showed that for 
some combinations of the parameters (Af,Ae,^?), the regime 
is supercritical and an infinite component arises. However, 




Figure 13. Effect of the secrecy rate threshold q on the percolation 
probability p'^'^'^ (Ae = Im'^, g(r) = Xjr^, Pi/a'^ = 10). 



the existence of an infinite component does not ensure con- 
nectivity between any two nodes, e.g., one node inside the 
infinite component cannot communicate with a node outside. 
In this sense, percolation ensures only partial connectivity of 
the network. In some scenarios, it is of interest to guarantee 
full connectivity, i.e., that all nodes can communicate with 
each other, possibly through multiple hops. Note, however, that 
for networks defined over an infinite region, the probability 
of full connectivity is exactly zero. Thus, to study of full 
connectivity, we need to restrict our attention to a finite 
region TZ. Throughout this section, we consider the simplest 
case of £1 = 0, i.e., the existence of secure links with a positive 
(but possibly small) MSR. 

A. Definitions 

Since the i5-graph is a directed graph, we start by dis- 
tinguishing between full out- and in-connectivity with the 
following definitions. 

Definition 8.1 (Full Out-Connectivity): A legitimate 
node Xi £ 11^ n 72. is fully out-connected with respect to 
a region TZ if in the i5-graph G = {lii^S} there exists a 
directed path between Xi and every node Xj £ 11^ n 72,, for 

7^ '^j • 

Definition 8.2 (Full In-Connectivity): A legitimate 
node Xi £ 11^ n 72. is fully in-connected with respect to 
a region 72 if in the i5-graph G = there exists a 

directed path between every node Xj S fl 72 and .t,;, for 

The iiS-graph is a random graph, and therefore we can 
consider the probabilities of a node Xi being fully in- or out- 
connected. For analysis purposes, we consider that a probe 
legitimate node (node 0) placed at the origin of the coordinate 
system, i.e., Xprobe = C 72. We then define Pout-con and 
Pin-con as the probability that node is, respectively, fully out- 
and fully in-connected. These probabilities are a deterministic 
function of the densities and Ae, and the area A of region 72. 
Our goal is to characterize Pout-con and Pin-con- 



B. Main Result 

In what follows, we focus on the asymptotic behavior of 
secure connectivity in the limit of a large density of legitimate 
nodesQ Specifically, for a fixed region of area A and a fixed 
density Ae of eavesdroppers, we would like to determine if 
by increasing A^ — > oo, we can asymptotically achieve full 
in- and out-connectivity with probability 10 The following 
theorem characterizes the asymptotic out-connectivity in the 
iiS-graph. 

Theorem 8.1 (Asymptotic Out-Connectivity H49T ): For the 
Poisson i5-graph with Ae > and A > 0, we have 



lim po 



1, 



i.e., the legitimate node at the origin is asymptotically out- 
connected. 

The following theorem characterizes the asymptotic in- 
connectivity in the i5-graph. 

Theorem 8.2 (Asymptotic In-Connectivity l[49]l }: For the 
Poisson iiS-graph with Ae > and A > 0, we have 

67r 



lim Pi 



m — con 



< 1 



-A, A 



), (34) 



87r + 3\/3 

i.e., the legitimate node at the origin is not asymptotically in- 
connected. 

The theorems show that full out-connectivity can be im- 
proved as much as desired by deploying more legitimate 
nodes. Full in-connectivity, however, remains bounded away 
from 1, no matter how large A^ is made (an intuitive explana- 
tion for this fact is provided in B9l ). Operationally, this means 
that a node can a.a.s. transmit secret messages to all the nodes 
in a finite region 72, but cannot a.a.s. receive secret messages 
from all the nodes in 72. 

IX. Conclusion 

Using the notion of strong secrecy, we provided an 
information-theoretic definition of the i5-graph as a model 
for intrinsically secure communication in large-scale networks. 
The iS-giaph captures the connections that can be established 
with MSR exceeding a threshold g, in a large network. This 
paper provided an overview of the main properties of this new 
class of random graphs. 

Perhaps the most interesting insight to be gained from our 
results, is the exact quantification of the impact of the eaves- 
dropper density Ae on secure connectivity — a modest density 
of scattered eavesdroppers can potentially cause a drastic 
reduction in the MSR provided at the physical layer of wireless 
communication networks. Our work has not yet addressed all 
of the far reaching implications of the broadcast property of 
the wireless medium. In the most general scenario, legitimate 
nodes could for example transmit their signals in a cooperative 
fashion, whereas malicious nodes could use jamming to disrupt 
all communications. We hope that further efforts in combining 
stochastic geometry with information-theoretic principles will 
lead to a more comprehensive treatment of wireless security. 

'For a non-asymptotic analysis of secure full connectivity, see 1491 . 
*We say that an event occurs "asymptotically almost surely" (a.a.s.) if its 
probabiUty approaches one as Xf — > oo. 
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